Multiple D-Link Product Management Password Disclosure Vulnerability

The D-Link DIR-652, DIR-615, DIR-827, DIR-615, DIR-657, and DIR-825 are all wireless router products from AUO D-Link. A security vulnerability exists in multiple D-Link products. An attacker could exploit the vulnerability to cause the leakage of password information, thereby obtaining sensitive...

D-Link Administrative Password Disclosure Vulnerability

D-Link models DIR-652, DIR-615, DIR-827, DIR-615, DIR-657, and DIR-825 suffer from an administrative password disclosure vulnerability. DLink Administrative Password Disclosure Vulnerability The problem in the following models : DIR-652 DIR-615 DIR-827 DIR-615 DIR-657 DIR-825 If login to web...

Cisco RV110W, RV130W, and RV215W Authorization Issues Vulnerabilities

Cisco?RV110W and others are a VPN firewall router from Cisco USA. An authorization issue vulnerability exists in the web-based management interface in the Cisco RV110W, RV130W, and RV215W, which can be exploited by a remote attacker to access information in the syslog file...

Cisco RV110W, RV130W, and RV215W Authorization Issue Vulnerabilities (CNVD-2019-25712)

Cisco RV110W and others are a VPN firewall router from Cisco USA. An authorization issue vulnerability exists in the Cisco RV110W, RV130W, and RV215W, which can be exploited by a remote attacker to obtain a list of devices connected to a guest network by accessing a URL on the web interface...

CVE-2019-6326

HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have embedded web server attributes which may be potentially vulnerable to Buffer Overflow...

CVE-2018-13898

CVE-2018-13898 is an out-of-bounds write caused by an incorrect array index check in the PMIC across Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Compute/Consumer, IoT, Industrial IOT, and various SDM/SD series). Root cause: improper bounds check on an array leading to write past the inte...

CVE-2019-5300

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2019-15892)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9650 is a central processing unit CPU product. A buffer overflow vulnerability exists in multiple Qualcomm products that can be...

CVE-2018-7851

CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could caus...

Rockwell Automation/Allen-Bradley Ethernet/IP Products Denial of Service

Binary data 720000.prm...

Buffer overflow

While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models that is greater than the size of the array, a buffer overflow occurs in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607,...

The vulnerability of microprogrammed software in Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, and 3800 exists due to insufficient validation of input data. This allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, and 3800 series exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures...

SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2019:1042-1)

This update for libvirt fixes the following issues : Security issues fixed : CVE-2019-3840: Fixed a NULL pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. CVE-2019-3886: Fixed an informati...

Security update for libvirt (moderate)

openSUSE Security Update: Security update for libvirt Announcement ID: openSUSE-SU-2019:1294-1 Rating: moderate References: 1120813 1126325 1127458 1131595 1131955 Cross-References: CVE-2019-3840 CVE-2019-3886 Affected Products: openSUSE Leap 42.3 An update that solves two vulnerabilities and has...

SUSE-SU-2019:1042-1 Security update for libvirt

This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. - CVE-2019-3886: Fixed an...

Android-Based Sony Smart-TVs Open to Image Pilfering

Two vulnerabilities in Android-based smart-TVs from Sony, including the flagship Bravia line, could allow attackers to access WiFi passwords and images stored on the devices. The bugs exist in the Photo Sharing Plus feature of Sony smart-TVs going back to 2015. They were uncovered by xen1thLabs i...

Qualcomm Critical Flaw Exposes Private Keys For Android Devices

Researchers have uncovered a side-channel attack that enables a bad actor to extract sensitive data from Qualcomm’s secure keystore. The critical flaw impacts most modern Android devices that use Qualcomm chips. The issue stems from an issue in Qualcomm technology, dubbed the Qualcomm Secure...

Sony Smart TV Information Disclosure / File Read Vulnerabilities

Exploit for hardware platform in category local exploits ADVISORY INFORMATION TITLE: Multiple vulnerabilities in Sony Smart TVs ADVISORY URL: https://www.darkmatter.ae/blogs/security-flaws-uncovered-in-sony-smart-tvs/ DATE PUBLISHED: 23/04/2019 AFFECTED VENDORS: Sony RELEASE MODE: Coordinated...

Gitea Remote Code Execution Vulnerability (CNVD-2019-13568)

Gitea is an open source lightweight code hosting solution. A security vulnerability exists in the models/repomirror.go file in Gitea versions prior to 1.7.6 and 1.8.x prior to 1.8-RC3. A remote attacker could exploit this vulnerability to execute code...

SAS 2019: Joe FitzPatrick Warns of the '$5 Supply Chain Attack'

SINGAPORE – At the Security Analyst Summit this year in Singapore, Threatpost editor Tara Seals catches up with Joe FitzPatrick, researcher with Securing Hardware, who led a session during the conference titled “A Measured Response to a Grain of Rice: An Implant in the Shell.” After a 2018...